Save a Filter as a View

Save a Particular View

1. Log in to LogRhythm NDR's new UI.

2. Click Hunt from the sidebar menu and then click Incidents.

In the Incidents page, the user can customize the Query, Site, Score, Anomaly, Summary By, Details Panel, and Whitelist. The user can also expand the category and filter any of the columns to get a customized view of Incident entries.

3. Click Saved Views on the right-hand side of the Incidents page to save this view.
   A drop-down list with the list of options is displayed.

4. To save a particular view, click Save New View.
   The New Save dialogue box appears where the user can add the desired name for the view. The view can be made public or private by using the toggle button provided.

Public views can be shared with other users while Private views cannot be shared.

5. When you click the Save button, the "Saved view added successfully" pop-up message appears.
   If the view is not saved successfully, an error message is displayed.

Load a Particular View

1. Log in to LogRhythm NDR's new UI.

2. Click Hunt from the sidebar menu and then click Incidents.
   The Incidents page is displayed.

3. Click Saved Views on the right-hand side of the Incidents page.
   A drop-down list appears where the already saved views are displayed.

4. Select a previously saved view.
   The Incident entries are loaded based on the saved view.